Service Registration Persistence

Establish Windows service-based persistence by registering a new service or changing an existing service's image path and start configuration to launch a service-compatible executable when the Service Control Manager starts it, commonly during system boot for an auto-start service. A service configuration change does not prove the executable ran; user logon is not the trigger for this technique.